ubuntu

Ubuntu 16.04 — golang-github-seccomp-libseccomp-golang — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — golang-github-seccomp-libseccomp-golang — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4574-1 Related CVEs: CVE-2017-18367 Upstream summary: It was discovered that libseccomp-golang did not properly generate BPFs. If a process were running under a restrictive seccomp filter that specified multiple syscall […]

Read more
Ubuntu 16.04 — mpg123 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mpg123 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4806-1 Related CVEs: CVE-2017-12839 CVE-2017-12797 CVE-2017-9545 CVE-2017-11126 Upstream summary: It was discovered that mpg123 failed to handle certain malformed mp3 files. An attacker could use this vulnerability to potentially leak […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-384 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-384 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3662-1 Related CVEs: CVE-2018-6249 CVE-2018-6253 CVE-2017-5753 CVE-2017-6257 CVE-2017-6259 CVE-2017-6266 CVE-2017-6267 CVE-2017-6272 Upstream summary: It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. A local […]

Read more
Ubuntu 16.04 — libemail-address-list-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libemail-address-list-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4517-1 Related CVEs: CVE-2018-18898 Upstream summary: It was discovered that Email-Address-List does not properly parse email addresses during email-ingestion. A remote attacker could use this issue to cause an algorithmic […]

Read more
Ubuntu 16.04 — rpcbind — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — rpcbind — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4986-4 Related CVEs: https://launchpad.net/bugs/1931507 CVE-2017-8779 Upstream summary: USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem […]

Read more
Ubuntu 16.04 — yubico-piv-tool — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — yubico-piv-tool — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4846-1 Related CVEs: CVE-2018-14779 CVE-2018-14780 Upstream summary: It was discovered that libykpiv, a supporting library of the Yubico PIV tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker […]

Read more
Ubuntu 16.04 — libarchive-zip-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libarchive-zip-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3703-1 Related CVEs: CVE-2018-10860 Upstream summary: It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information. Table of […]

Read more
Ubuntu 14.04 — gdk-pixbuf — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gdk-pixbuf — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3532-1 Related CVEs: CVE-2017-1000422 CVE-2017-6312 CVE-2017-6313 CVE-2017-6314 CVE-2017-2862 CVE-2017-2870 CVE-2017-6311 CVE-2015-7552  +5 more Upstream summary: It was discoreved that GDK-PixBuf incorrectly handled certain gif images. An attacker could use this […]

Read more
Ubuntu 16.04 — libcrypto++ — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libcrypto++ — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4827-1 Related CVEs: CVE-2017-9434 Upstream summary: It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information. Table of contents Symptom & […]

Read more
Ubuntu 16.04 — soundtouch — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — soundtouch — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 March 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4826-1 Related CVEs: CVE-2017-9258 CVE-2017-9259 CVE-2017-9260 CVE-2018-1000223 CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Upstream summary: It was discovered that SoundTouch incorrectly handled certain WAV files. A remote attacker could possibly use this issue […]

Read more
CHAT